Repository navigation

All pull requests

Reject Sigkill and Signal actions in kprobe, uprobe and tracepoint policies on kernels older than 5.3, where they were previously accepted but never sent a signal.
#6047andrewstrohman opened Nov 9, 2026Contributor
2
bpf: Split execve into smaller functions
#6043sayboras opened Nov 9, 2026Member
1
pkg/ktime: decode BPF ktimes with the clock BPF stamps them with
#6039jess-sol opened Nov 7, 2026
1
[v1.6] bpf: improve do_action error handling
#60383u13r opened Nov 7, 2026Contributor
1
bpf: keep existing cgroup2 options when mounting
#6035mert-sayar opened Nov 7, 2026
4
tracing/lsm: fix loading policies with more than one SubString value
#6033AdzerKI opened Nov 6, 2026
2
uprobe: return action fixes
#6031andrewstrohman opened Nov 6, 2026Contributor
3
fix(deps): update module go.yaml.in/yaml/v3 to v4 (main)
#6024cilium-renovate[bot] opened Nov 6, 2026Bot1 task
1
bpf: a missing state should match the Not* operators
#60203u13r opened Nov 5, 2026Contributor
1
new(bpf,pkg): drop ldd for dynamic_so and parse ldso instead
#6019FedeDP opened Nov 5, 2026Contributor
6
go: Use json v2 package
#6018sayboras opened Nov 5, 2026Member
1
bpf: fix rate limiting while uptime is below the interval
#6016kherbut opened Nov 4, 2026
4
Stateful Policies: allow scoping the state to the thread or the process
#60153u13r opened Nov 4, 2026Contributor
3
new: bpf coccinelle CI
#6007FedeDP opened Nov 3, 2026Contributor
4
cleanup(pkg/selectors): write empty matchStates sec for return selectors
#6005FedeDP opened Nov 3, 2026Contributor
5
fix(deps): update module github.com/alecthomas/kong to v1.17.0 (main)
#5995cilium-renovate[bot] opened Nov 2, 2026Bot1 task
chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.224.2 (main)
#5992cilium-renovate[bot] opened Nov 2, 2026Bot1 task
fix(deps): update all go dependencies main (main) (patch)
#5987cilium-renovate[bot] opened Oct 30, 2026Bot1 task
sensors: create bpffs pin and cgroup2 directories 0755 instead of mode 0
#5967SteeleDesmond opened Oct 29, 2026
5
server: add metric for events dropped when aggregation buffer is full
#5962Aditya-9-6 opened Oct 29, 2026
7
option: Check conflicting flags in ReadAndSetFlags
#5961sayboras opened Oct 29, 2026Member
3
process: fix flaky TestProcessCacheGCEarlyDeletion with -count>1
#5925mert-sayar opened Oct 27, 2026
5
Pr/olsajiri/exec dynptr
#5918olsajiri opened Oct 26, 2026Contributor
enable revive var-name linter
#5912rafaelroquetto opened Oct 23, 2026Contributor
7
mbset: fix followChildren ID leak (duplicate paths)
#5907abdullahhanif-001 opened Oct 23, 20262 of 3 tasks
14

Navigation Menu

Repository navigation

All pull requests

Reject Sigkill and Signal actions in kprobe, uprobe and tracepoint policies on kernels older than 5.3, where they were previously accepted but never sent a signal.

bpf: Split execve into smaller functions

pkg/ktime: decode BPF ktimes with the clock BPF stamps them with

[v1.6] bpf: improve do_action error handling

bpf: keep existing cgroup2 options when mounting

tracing/lsm: fix loading policies with more than one SubString value

uprobe: return action fixes

fix(deps): update module go.yaml.in/yaml/v3 to v4 (main)

bpf: a missing state should match the Not* operators

new(bpf,pkg): drop `ldd` for dynamic_so and parse ldso instead

go: Use json v2 package

bpf: fix rate limiting while uptime is below the interval

Stateful Policies: allow scoping the state to the thread or the process

new: bpf coccinelle CI

cleanup(pkg/selectors): write empty matchStates sec for return selectors

fix(deps): update module github.com/alecthomas/kong to v1.17.0 (main)

chore(deps): update ghcr.io/renovatebot/renovate docker tag to v44.224.2 (main)

fix(deps): update all go dependencies main (main) (patch)

sensors: create bpffs pin and cgroup2 directories 0755 instead of mode 0

server: add metric for events dropped when aggregation buffer is full

option: Check conflicting flags in ReadAndSetFlags

process: fix flaky TestProcessCacheGCEarlyDeletion with -count>1

Pr/olsajiri/exec dynptr

enable revive var-name linter

mbset: fix followChildren ID leak (duplicate paths)

Pull requests